This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/PyPswdGk1ZVrHOm_LMSZBjhQB1A.roa File: PyPswdGk1ZVrHOm_LMSZBjhQB1A.roa (raw, json) Hash identifier: +8V8Dt++uOTSXhRHoCWJ+fxEyoBe8YcJTvD0shhiPWM= Subject key identifier: 3F:23:EC:C1:D1:A4:D5:95:6B:1C:E9:BF:2C:C4:99:06:38:50:07:50 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019B797ED13BD5E1E52CBCADC375309E8A37 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/PyPswdGk1ZVrHOm_LMSZBjhQB1A.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200296 IP address blocks: 5.56.135.0/24 maxlen: 24 79.143.85.0/24 maxlen: 24 87.236.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d1:3b:d5:e1:e5:2c:bc:ad:c3:75:30:9e:8a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f23ecc1d1a4d5956b1ce9bf2cc4990638500750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c6:04:8d:ba:2d:f7:dc:17:93:94:93:19:e0: 06:0f:4f:96:3e:c8:31:49:a2:7c:dd:f5:72:80:98: e0:2c:2d:26:6e:6e:6f:d9:44:63:cf:73:25:f5:96: 53:c4:7e:72:78:fa:37:9f:72:f2:df:07:d8:7f:c7: 08:88:fe:20:94:31:ad:28:b3:fa:ab:1e:26:78:51: 12:52:30:27:9e:34:04:e3:50:e5:19:81:06:04:3f: 87:11:59:0e:16:25:73:56:17:de:8d:eb:52:41:ba: a3:3d:a4:5e:09:02:0d:d6:f7:fe:eb:e4:30:0e:6c: 0c:df:30:73:c9:cc:d0:eb:2a:16:de:27:7e:21:5d: e1:b4:f2:83:03:e6:0e:68:d3:a4:80:52:58:89:f2: 28:15:c5:a2:34:00:02:07:f0:a5:a3:0e:c7:93:bd: ba:10:59:4d:8c:d4:02:9f:dc:c4:50:2f:f8:fa:30: 3f:7d:1a:de:ee:cf:86:0e:12:00:6e:fd:da:41:80: 4a:6b:93:71:be:e5:db:34:00:15:88:da:6e:90:ca: 82:a7:7f:02:b5:e8:a1:d0:b5:0f:ba:2d:83:67:c6: 10:d2:ad:2c:39:13:58:3f:d3:15:e9:aa:e6:76:3e: 9c:d3:66:85:41:6f:59:22:e8:0b:a3:04:6f:97:ec: 2f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:23:EC:C1:D1:A4:D5:95:6B:1C:E9:BF:2C:C4:99:06:38:50:07:50 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/PyPswdGk1ZVrHOm_LMSZBjhQB1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.56.135.0/24 79.143.85.0/24 87.236.211.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:4d:50:77:11:58:bc:55:55:a7:d3:07:5f:36:ce:21:d8:8c: a6:be:1f:19:5f:82:eb:5a:da:88:30:19:38:8e:e8:68:c0:32: eb:d9:ee:43:ca:dc:d0:b5:a6:98:48:3b:76:d1:47:7d:2c:d3: 64:64:86:7b:af:27:50:87:73:32:cc:84:8f:73:31:69:a2:6a: a3:0d:7a:98:c2:95:86:79:5f:6e:4e:30:f7:0a:53:98:0d:93: 47:bc:80:6f:82:87:cc:5d:c1:1d:66:87:c9:4b:28:c0:0e:16: 4f:a8:2c:1d:2b:af:30:a6:80:78:f8:17:42:ce:da:c7:aa:21: 79:1a:2e:05:4f:d0:20:ff:58:40:ce:23:cc:ef:b1:ec:56:90: e2:95:67:bf:7e:6c:e8:cc:a2:65:55:e3:13:a0:18:9b:e3:74: 9e:a4:5d:86:c2:21:33:96:8d:ee:01:bd:db:37:49:8d:98:85: 96:8a:ff:bb:ef:65:52:da:2e:b6:c8:a5:d3:f5:66:93:79:17: 49:d8:a6:b5:ba:22:b2:f9:21:a3:69:f5:3e:a0:12:ed:ee:f8: 81:26:6e:f0:2c:6f:52:a2:75:81:90:6b:d4:d7:1e:32:29:fc: fd:86:a3:df:67:36:16:11:4c:a5:44:81:ab:8f:8e:d2:7d:14: 00:04:af:3b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ftE71eHlLLytw3Uwnoo3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjIzZWNjMWQxYTRkNTk1NmIxY2U5YmYyY2M0OTkwNjM4NTAwNzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncYEjbot99wXk5STGeAGD0+WPsgx SaJ83fVygJjgLC0mbm5v2URjz3Ml9ZZTxH5yePo3n3Ly3wfYf8cIiP4glDGtKLP6 qx4meFESUjAnnjQE41DlGYEGBD+HEVkOFiVzVhfejetSQbqjPaReCQIN1vf+6+Qw DmwM3zBzyczQ6yoW3id+IV3htPKDA+YOaNOkgFJYifIoFcWiNAACB/Clow7Hk726 EFlNjNQCn9zEUC/4+jA/fRre7s+GDhIAbv3aQYBKa5NxvuXbNAAViNpukMqCp38C teih0LUPui2DZ8YQ0q0sORNYP9MV6armdj6c02aFQW9ZIugLowRvl+wvWQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD8j7MHRpNWVaxzpvyzEmQY4UAdQMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEvUHlQc3dkR2sxWlZySE9tX0xNU1pCamhRQjFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABTiHAwQA T49VAwQAV+zTMA0GCSqGSIb3DQEBCwUAA4IBAQBtTVB3EVi8VVWn0wdfNs4h2Iym vh8ZX4LrWtqIMBk4juhowDLr2e5DytzQtaaYSDt20Ud9LNNkZIZ7rydQh3MyzISP czFpomqjDXqYwpWGeV9uTjD3ClOYDZNHvIBvgofMXcEdZofJSyjADhZPqCwdK68w poB4+BdCztrHqiF5Gi4FT9Ag/1hAziPM77HsVpDilWe/fmzozKJlVeMToBib43Se pF2GwiEzlo3uAb3bN0mNmIWWiv+772VS2i62yKXT9WaTeRdJ2Ka1uiKy+SGjafU+ oBLt7viBJm7wLG9SonWBkGvU1x4yKfz9hqPfZzYWEUylRIGrj47SfRQABK87 -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:18 2026 by rpki-client